Apache Qpid Proton C through 0.40.0 can crash on nested AMQP bodies
Deeply nested message bodies decoded by pn_message_body() can overflow the stack; 0.41.1 fixes PROTON-2976.
44
Vulnerability1 · 1 read
CVE-2026-105042
Unbounded recursion crash in Apache Qpid Proton C through 0.40.0
- CVSS
- —
- EPSS
- —
- Published
- ·
- Modified
AI analysisSummaries by Vani AI
pn_message_body() in Apache Qpid Proton C can recurse without bound while decoding a deeply nested AMQP message body, overflowing the stack and crashing the process. Anyone who can supply a message that the library decodes can trigger it. Versions through 0.40.0 are affected; 0.41.1 fixes the issue.
What to do: Upgrade Apache Qpid Proton C to 0.41.1.
| Product | Affected | Fixed in |
|---|---|---|
| Apache Qpid Proton C | through 0.40.0 | 0.41.1 |
Estimated exposure
No basis for an estimate.
Order-of-magnitude estimate by the model from install counts, market share and public scan data it knows; verify before quoting.
Description · NVD
A message body that is deeply nested and decoded by pn_message_body() could overflow the stack and cause a crash. This issue affects Apache Qpid Proton C: through 0.40.0. Users are recommended to upgrade to version 0.41.1, which fixes the issue.
- Weakness
- CWE-674